ntop Error Codes
- Wrong network mask or bridging enabled
ntop will report this problem for those hosts that apparently have a wrong netmask. ntop detects this problem when a host sends a packet to a broadcast address where the destination MAC address is not FF:FF:FF:FF:FF:FF. This could indicate that:
- such host has a wrong netmask
- it is a bridge.
- Duplicated MAC found for this IP address
ntop will report this problem for those hosts that for a single MAC address sport several IP addresses. This could indicate that:
- Someone is sending spoofed packets
- A host has a wrong netmask hence it routes packets to the default gateway that routes them to destination. This is quite common on networks where the netmask has changed and some of the hosts still use the old netmask.